Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: 383CSEP59cWrwP1zOh/xND9zac8GCmrpdOnLw68Yrm8=
Subject key identifier: 87:BA:57:82:39:6E:06:EE:89:D5:C1:FC:B7:6F:6B:8C:6C:B9:0D:76
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 0194BC051F70E3EA2B85B49C435777F0986F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: PzIvd0JzSXUsvMKsy1q+qqAw09i4mG8/6v/qMTZ1c2s=)
2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1f:70:e3:ea:2b:85:b4:9c:43:57:77:f0:98:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=87ba5782396e06ee89d5c1fcb76f6b8c6cb90d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:fc:e8:ea:98:c8:3b:c9:a7:96:ef:ad:ea:
67:f4:80:70:c2:7d:6b:c8:41:af:e9:28:be:bb:6a:
5e:23:1d:40:ee:bb:93:11:76:a2:a1:be:9d:be:15:
d8:2c:b5:5e:5f:ec:6e:c1:2c:17:55:b8:3e:72:61:
ee:81:58:e9:8e:e3:f7:a4:d7:f7:8b:a1:2a:81:e2:
40:7b:f8:d1:4c:e1:cd:b1:82:ac:fe:1e:e2:1e:0b:
0e:5a:5c:7c:a0:62:56:be:7e:8e:2a:27:0e:f1:6e:
77:e9:9b:b6:04:7f:c4:40:d1:b2:f5:a0:3a:76:0e:
26:0d:7c:77:64:86:67:0e:7a:37:f6:2c:3c:a3:ed:
07:34:f4:6a:fc:5e:aa:06:65:aa:96:ce:ed:7d:a0:
69:8d:53:b7:89:b2:55:79:4c:91:72:33:20:a1:ea:
8d:72:d2:e1:01:ec:6a:b1:8c:59:c4:b2:e3:bb:70:
96:ba:e5:22:4a:16:34:06:b6:04:9f:4c:51:85:3d:
b1:2f:85:49:de:92:52:d1:ef:0e:52:68:bb:81:58:
aa:c5:fb:7c:13:0f:37:f8:47:7f:9e:2e:21:71:1d:
ae:5e:9a:25:5b:24:7a:fb:1c:fc:db:f7:47:1d:09:
97:50:54:77:20:d4:a8:bc:1d:a8:8e:25:54:87:f0:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BA:57:82:39:6E:06:EE:89:D5:C1:FC:B7:6F:6B:8C:6C:B9:0D:76
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5c:3f:c2:5c:cc:9d:cf:fc:27:58:b5:9e:4d:62:8b:c6:b8:
6a:24:0a:1e:9e:67:b3:21:23:32:cf:b1:b6:29:9e:0c:9f:93:
c8:38:4f:4a:2b:97:d6:08:d6:7b:32:53:36:c0:10:31:ca:42:
2a:5b:c1:1a:f1:39:0b:cf:54:59:79:8a:eb:4c:62:dd:e4:fa:
a4:6b:99:c1:ad:74:2d:eb:8e:cb:aa:29:e7:6e:4d:1e:7a:71:
4b:b7:85:d8:b6:d9:4f:70:65:a8:25:4b:82:fa:4c:4e:d5:6f:
f9:18:84:88:b9:c3:e6:e1:bd:a6:b9:48:8a:96:03:ad:90:42:
d3:1d:3b:d3:a4:06:cf:cb:f5:7c:c5:3b:7a:4d:45:4e:2a:22:
ec:e7:a1:d9:ec:07:58:75:00:60:52:3c:d7:7c:7d:3f:c4:d9:
6c:3f:9a:8b:c2:88:ce:d3:36:ca:1e:6f:26:81:25:8a:c7:81:
87:80:29:8b:39:24:25:71:1c:84:65:56:43:fc:26:fb:d9:4d:
39:9e:16:41:95:7a:2d:eb:9e:68:2b:c1:52:18:64:6a:25:b3:
08:69:5d:cb:b4:38:63:bd:95:9b:fe:80:f2:72:52:20:1b:fb:
dd:19:62:da:20:03:2d:12:19:ff:76:9d:a6:18:9e:cd:cf:25:
eb:4a:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:53 2025 by rpki-client